/* Copyright (C) 2011 the GSS-PROXY contributors, see COPYING for license */
#include "gp_rpc_process.h"
#include "gp_debug.h"
int gp_indicate_mechs(struct gp_call_ctx *gpcall UNUSED,
union gp_rpc_arg *arg,
union gp_rpc_res *res)
{
struct gssx_arg_indicate_mechs *ima;
struct gssx_res_indicate_mechs *imr;
gss_OID_set mech_set = GSS_C_NO_OID_SET;
gss_OID_set name_types = GSS_C_NO_OID_SET;
gss_OID_set mech_attrs = GSS_C_NO_OID_SET;
gss_OID_set known_mech_attrs = GSS_C_NO_OID_SET;
gss_buffer_desc sasl_mech_name = GSS_C_EMPTY_BUFFER;
gss_buffer_desc mech_name = GSS_C_EMPTY_BUFFER;
gss_buffer_desc mech_desc = GSS_C_EMPTY_BUFFER;
gss_OID_set attr_set = GSS_C_NO_OID_SET;
gss_buffer_desc name = GSS_C_EMPTY_BUFFER;
gss_buffer_desc short_desc = GSS_C_EMPTY_BUFFER;
gss_buffer_desc long_desc = GSS_C_EMPTY_BUFFER;
gssx_mech_info *mi;
gssx_mech_attr *ma;
uint32_t ret_maj;
uint32_t ret_min;
int present;
int ret;
ima = &arg->indicate_mechs;
imr = &res->indicate_mechs;
GPRPCDEBUG(gssx_arg_indicate_mechs, ima);
/* get all mechs */
ret_maj = gss_indicate_mechs(&ret_min, &mech_set);
if (ret_maj) {
goto done;
}
ret_maj = gss_create_empty_oid_set(&ret_min, &attr_set);
if (ret_maj) {
goto done;
}
/* fill up gssx_mech_info */
imr->mechs.mechs_val = calloc(mech_set->count, sizeof(gssx_mech_info));
if (!imr->mechs.mechs_val) {
ret_maj = GSS_S_FAILURE;
ret_min = ENOMEM;
goto done;
}
imr->mechs.mechs_len = mech_set->count;
for (unsigned i = 0, h = 0; i < mech_set->count; i++, h++) {
mi = &imr->mechs.mechs_val[h];
ret = gp_conv_oid_to_gssx(&mech_set->elements[i], &mi->mech);
if (ret) {
ret_maj = GSS_S_FAILURE;
ret_min = ret;
goto done;
}
ret_maj = gss_inquire_names_for_mech(&ret_min,
&mech_set->elements[i],
&name_types);
if (ret_maj) {
gp_log_failure(&mech_set->elements[i], ret_maj, ret_min);
/* temporarily skip any offender */
imr->mechs.mechs_len--;
h--;
xdr_free((xdrproc_t)xdr_gssx_OID, (char *)&mi->mech);
continue;
#if 0
ret_maj = GSS_S_FAILURE;
ret_min = EINVAL;
goto done;
#endif
}
ret = gp_conv_oid_set_to_gssx(name_types, &mi->name_types);
if (ret) {
ret_maj = GSS_S_FAILURE;
ret_min = ret;
goto done;
}
gss_release_oid_set(&ret_min, &name_types);
ret_maj = gss_inquire_attrs_for_mech(&ret_min,
&mech_set->elements[i],
&mech_attrs,
&known_mech_attrs);
if (ret_maj) {
goto done;
}
ret = gp_conv_oid_set_to_gssx(mech_attrs, &mi->mech_attrs);
if (ret) {
ret_maj = GSS_S_FAILURE;
ret_min = ret;
goto done;
}
for (unsigned j = 0; j < mech_attrs->count; j++) {
ret_maj = gss_test_oid_set_member(&ret_min,
&mech_attrs->elements[j],
attr_set,
&present);
if (ret_maj) {
goto done;
}
if (present) {
continue;
}
ret_maj = gss_add_oid_set_member(&ret_min,
&mech_attrs->elements[j],
&attr_set);
if (ret_maj) {
goto done;
}
}
gss_release_oid_set(&ret_min, &mech_attrs);
ret = gp_conv_oid_set_to_gssx(known_mech_attrs,
&mi->known_mech_attrs);
if (ret) {
ret_maj = GSS_S_FAILURE;
ret_min = ret;
goto done;
}
for (unsigned j = 0; j < known_mech_attrs->count; j++) {
ret_maj = gss_test_oid_set_member(&ret_min,
&known_mech_attrs->elements[j],
attr_set,
&present);
if (ret_maj) {
goto done;
}
if (present) {
continue;
}
ret_maj = gss_add_oid_set_member(&ret_min,
&known_mech_attrs->elements[j],
&attr_set);
if (ret_maj) {
goto done;
}
}
gss_release_oid_set(&ret_min, &known_mech_attrs);
ret_maj = gss_inquire_saslname_for_mech(&ret_min,
&mech_set->elements[i],
&sasl_mech_name,
&mech_name,
&mech_desc);
if (ret_maj) {
goto done;
}
ret = gp_conv_buffer_to_gssx(&sasl_mech_name, &mi->saslname_sasl_mech_name);
if (ret) {
ret_maj = GSS_S_FAILURE;
ret_min = ret;
goto done;
}
gss_release_buffer(&ret_min, &sasl_mech_name);
ret = gp_conv_buffer_to_gssx(&mech_name, &mi->saslname_mech_name);
if (ret) {
ret_maj = GSS_S_FAILURE;
ret_min = ret;
goto done;
}
gss_release_buffer(&ret_min, &mech_name);
ret = gp_conv_buffer_to_gssx(&mech_desc, &mi->saslname_mech_desc);
if (ret) {
ret_maj = GSS_S_FAILURE;
ret_min = ret;
goto done;
}
gss_release_buffer(&ret_min, &mech_desc);
}
/* fill up gssx_mech_attr */
imr->mech_attr_descs.mech_attr_descs_val = calloc(attr_set->count,
sizeof(gssx_mech_attr));
if (!imr->mech_attr_descs.mech_attr_descs_val) {
ret_maj = GSS_S_FAILURE;
ret_min = ENOMEM;
goto done;
}
imr->mech_attr_descs.mech_attr_descs_len = attr_set->count;
for (unsigned i = 0; i < attr_set->count; i++) {
ma = &imr->mech_attr_descs.mech_attr_descs_val[i];
ret = gp_conv_oid_to_gssx(&attr_set->elements[i], &ma->attr);
if (ret) {
ret_maj = GSS_S_FAILURE;
ret_min = ret;
goto done;
}
ret_maj = gss_display_mech_attr(&ret_min,
&attr_set->elements[i],
&name,
&short_desc,
&long_desc);
if (ret_maj) {
goto done;
}
ret = gp_conv_buffer_to_gssx(&name, &ma->name);
if (ret) {
ret_maj = GSS_S_FAILURE;
ret_min = ret;
goto done;
}
gss_release_buffer(&ret_min, &name);
ret = gp_conv_buffer_to_gssx(&short_desc, &ma->short_desc);
if (ret) {
ret_maj = GSS_S_FAILURE;
ret_min = ret;
goto done;
}
gss_release_buffer(&ret_min, &short_desc);
ret = gp_conv_buffer_to_gssx(&long_desc, &ma->long_desc);
if (ret) {
ret_maj = GSS_S_FAILURE;
ret_min = ret;
goto done;
}
gss_release_buffer(&ret_min, &long_desc);
}
done:
ret = gp_conv_status_to_gssx(ret_maj, ret_min, GSS_C_NO_OID,
&imr->status);
GPRPCDEBUG(gssx_res_indicate_mechs, imr);
gss_release_buffer(&ret_min, &long_desc);
gss_release_buffer(&ret_min, &short_desc);
gss_release_buffer(&ret_min, &name);
gss_release_oid_set(&ret_min, &attr_set);
gss_release_buffer(&ret_min, &mech_desc);
gss_release_buffer(&ret_min, &mech_name);
gss_release_buffer(&ret_min, &sasl_mech_name);
gss_release_oid_set(&ret_min, &known_mech_attrs);
gss_release_oid_set(&ret_min, &mech_attrs);
gss_release_oid_set(&ret_min, &name_types);
gss_release_oid_set(&ret_min, &mech_set);
return ret;
}